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IN THE CLAIMS: 

1 . (currently amended) A method, feF-j^e-Y4d^ 



receiving, £*H»d&m.a secure environment in a . temsinaL via a secure channel, 
from a server deviee outside said terminal, a first key for decrypting -s-aidaii encrypted 
application; 

decrypting, in the secure environment, said encrypted application by means 
of said first key; 

re-encrypting, in said secure environment, the application by means of a 
second key; and 

storing, outside said secure environment, the re-encrypted application. 
2. (currently amended) A method, fe£-p*e¥^ 



e^#H^d-comprising : 

P^*^ an encrypted application in a terminal ; 

receiving, &1- s-aidmji secure environment in ^iajd ieiTnjnal, via a secure 
channel, from a server devie eoutside said, terminal , a first key for decrypting said 
encrypted application; 

encrypting, in said secure environment, said first key by means of a second 
key; and 

storing, outside said secure environment, the encrypted first key. 



3. (previously presented) The method according to claim 1, the method comprising: 
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encrypting, in said secure environment, said first key by means of the second 
key; and 

storing, outside said secure environment, the encrypted first key. 

4. (previously presented) The method according to claim 1, wherein said second key 
is symmetric and can be derived from the application. 

5. (previously presented) The method according to claim 4, wherein said second key 
is comprised in the application itself. 

6. (previously presented) The method according to claim 4, wherein said second key 
is generated in the secure environment using an application seed. 

7. (original) The method according to claim 1, wherein multiple keys can be 
transferred successively on the secure channel into the secure environment, each key 
being used to decrypt a corresponding encrypted application in the secure 
environment. 



8. (currently amended) Apparatus, 



comprising: 

an application JiAdiKljng.M installation part for receiving, a^-^ridin.a secure 
environment of a terminal, via sakla secure channel, from s^kia server dev4eeoutside 
said terminal, a first key for decrypting saMan encrypted application; 

a processor for decrypting, in the secure environment, said encrypted 
application by means of said first key; 

said processor for re-encrypting, in said secure environment, the application 
based on a second key; and 
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a memory for storing, outside said secure environment, the re-encrypted 
application. 

9. (currently amended) A pparatus, -sys^e^^i^^ 

a--s<3fvef--feF-^ 

an application including an installation part eP ai^-apfiliea^eH for receiving, m 
®ak4m a secure environment of a terminal, via secure channel, from &&kk 
server d&v4Geoutsj^^ a first key for decrypting §&i4an encrypted 

application; 

a processor for encrypting, in said secure environment, said first key by 
means of a second key; and 

said processor for storing in a memory of said terminal device , outside said 
secure environment, the encrypted first key. 

10. (currently amended) The apparatus ^y^em-according to claim 8, wherein said 
processor is: 

for encrypting, in said secure environment, said first key by means of the 
second key; and 

for storing, outside said secure environment, the encrypted first key. 

11. (currently amended) The apparatus sye r tern according to claim 8, wherein said 
second key is symmetric and can be derived from the application. 

12. (currently amended) The ^gamtu^s^em-according to claim 11, wherein said 
second key is comprised in the application itself. 



13. (currently amended) The apparatus - eys^em-according to claim 11, wherein said 
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second key is generated in the secure environment using an application seed. 

14. (currently amended) The a£^r^s^^yMe»-according to claim 8, wherein the 
apparatus sys*em-is arranged such that multiple keys can be transferred successively 
on the secure channel into the secure environment, each key being used to decrypt a 
corresponding encrypted application in the secure environment. 

15. (previously presented) The method of claim 2, wherein said second key is 
symmetric and can be derived from the application. 

16. (previously presented) The method of claim 15, wherein said second key is 
comprised in the application itself. 

17. (previously presented) The method of claim 15, wherein said second key is 
generated in the secure environment using an application seed. 

18. (original) The method of claim 2, wherein multiple keys can be transferred 
successively on the secure channel into the secure environment, each key being used 
to decrypt a corresponding encrypted application in the secure environment. 

19. (previously presented) The method of claim 9, wherein said second key is 
symmetric and can be derived from the application. 

20. (previously presented) The method of claim 19, wherein said second key is 
comprised in the application itself. 

21. (currently amended) The method of claim 9, wherein the eystoe*apparatus is 
arranged such that multiple keys can be transferred successively on the secure 
channel into the secure environment, each key being used to decrypt a corresponding 
encrypted application in the secure environment. 
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22. (currently amended) A terminal device comprising: 

an installation part of an application-see^e^bam^, responsive to sb- 
«^e^pt@4a first key dewffiteadedgjroy^^^ from a server 

external to said terminal device for providing said-eee^^y^ed first key-ewr^ai4 
secure channel ; and 

a secure environment, responsive to said-e&eiyps&d first key r^eivede-wp 

devk*3 -for decrypting s£id-^K?£yp4€d--fes^^ 

p&*$-e#-an encrypted application in said terminal device using said first key received 
over said secure channel from said server external to said terminal device. 



23. (currently amended) The terminal device of claim 24-22, wherein said first key is 
encrypted by said server using a privatesecond key belonging to said terminal device 

24. (currently amended) An integrated circuit for inMallation m__a_temiinal 
comprising a signal processor and a secure environment, said secure environment 
responsive to-^B-^^¥p^ed^ first key from a server outside said terminal received 
over a secure channel for decrypting 6-ajd4k^feeyan encrypted application within 
said secure environment4e^dee*^^ for executing said decrypted 
application within said secure environment and for ^ -3H€Fyffii&g, encrypting said 
first key with a second key belonging to said terminal device for storage-efr^id 
ter mkval-d ev i-e e outside said secure environment so that said first key can be used 
again within said secure environment without need for receipt again of said first key 
from said server. 
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